Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/323830343a356561343a3a2f33322d3438203d3e20323639303437.roa
File:                     323830343a356561343a3a2f33322d3438203d3e20323639303437.roa (raw, json)
Hash identifier:          pvaUlMTt8Ix5bav5kCiR3Eajo0ykDIRGsnqA+TZzILM=
Subject key identifier:   33:08:12:71:DD:6F:8D:E9:2B:FA:D9:11:C4:06:89:E5:2D:1B:F1:B0
Certificate issuer:       /CN=2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7
Certificate serial:       6FDD0970559D8EB36B4D2BF9E5F1CA9A88F63B44
Authority key identifier: 2E:D1:24:5F:F6:C4:F5:B8:0F:5F:20:6D:C7:AA:8F:A7:65:63:3A:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/323830343a356561343a3a2f33322d3438203d3e20323639303437.roa
Signing time:             Wed 19 Mar 2025 00:07:35 +0000
ROA not before:           Wed 19 Mar 2025 00:02:35 +0000
ROA not after:            Wed 18 Mar 2026 00:07:35 +0000
asID:                     269047
IP address blocks:        2804:5ea4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:dd:09:70:55:9d:8e:b3:6b:4d:2b:f9:e5:f1:ca:9a:88:f6:3b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7
        Validity
            Not Before: Mar 19 00:02:35 2025 GMT
            Not After : Mar 18 00:07:35 2026 GMT
        Subject: CN=33081271DD6F8DE92BFAD911C40689E52D1BF1B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:66:34:ba:c9:05:49:97:cd:cd:89:ba:2c:
                    a1:a2:a4:b3:ae:61:a5:4b:0d:71:17:2e:64:55:4c:
                    79:18:23:52:e3:53:29:22:0a:2e:e0:e7:0e:1d:06:
                    8b:93:75:dd:35:f7:66:3f:d2:2f:6c:a7:ab:12:9d:
                    f6:34:ba:11:aa:4f:e3:5f:20:31:39:29:ad:36:4d:
                    2d:e1:d1:4b:55:b5:04:63:ff:dd:63:97:fb:de:f9:
                    68:70:39:d9:9e:b1:bb:4c:a4:5b:e6:20:cb:93:84:
                    4e:5d:8d:6a:90:86:e6:b9:b5:60:1f:8e:07:03:98:
                    78:b5:f6:16:ee:1b:3b:86:43:bd:cb:05:0e:83:86:
                    4c:bf:a9:4b:47:41:1b:ff:8d:b3:ac:bf:f2:81:e0:
                    8d:8e:56:28:31:dd:78:ca:fa:73:4f:6c:f1:58:dd:
                    ad:0e:bd:a2:9b:6c:68:2a:e1:dc:b1:1e:87:18:17:
                    a7:05:19:a6:8d:91:25:04:cd:47:88:6d:76:b0:9d:
                    b0:5e:28:05:a5:8d:f3:db:6a:67:e2:b0:cc:6c:f5:
                    17:39:b8:f3:0a:01:3d:4d:c5:de:41:b3:b5:f2:a9:
                    29:de:da:89:75:d4:1e:97:a8:f0:87:6b:df:62:55:
                    a2:ea:14:63:98:67:b4:27:60:87:8e:4d:4f:22:b5:
                    7f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:12:71:DD:6F:8D:E9:2B:FA:D9:11:C4:06:89:E5:2D:1B:F1:B0
            X509v3 Authority Key Identifier:
                keyid:2E:D1:24:5F:F6:C4:F5:B8:0F:5F:20:6D:C7:AA:8F:A7:65:63:3A:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2ED1245FF6C4F5B80F5F206DC7AA8FA765633AC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/323830343a356561343a3a2f33322d3438203d3e20323639303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ea4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:9f:b8:10:9e:f7:f1:3b:d6:53:c1:50:c6:ff:1f:d7:2f:f2:
         97:ea:6b:4d:2f:66:5d:54:8d:95:80:54:92:55:29:e9:d2:58:
         5a:08:5c:94:5d:aa:0d:e4:b3:ea:89:b0:67:0b:ae:ba:31:5e:
         64:61:29:88:f5:57:43:98:f7:3f:e8:6d:6d:00:d4:38:35:46:
         1b:27:1a:eb:86:d7:13:af:8f:e2:61:66:93:b1:36:c4:a4:8d:
         1f:8b:1a:0c:6e:4e:b8:f5:0e:c6:10:0e:28:f5:d8:a0:e7:b3:
         0d:24:0c:f1:a7:23:fe:b7:2a:0f:e9:4b:fe:70:09:33:9f:48:
         e5:d7:2b:d0:23:56:17:26:c3:74:f6:6a:93:fb:00:af:0d:51:
         01:cf:6b:08:8a:bd:bd:73:cc:15:a3:b6:54:a3:36:e1:ac:94:
         17:a7:81:f6:75:62:91:d9:37:8e:c7:5f:33:53:60:57:b2:39:
         56:00:5f:94:63:58:63:72:a2:fb:11:6a:fe:2e:e1:53:95:b4:
         1b:ce:7b:77:1e:f3:8a:a2:a2:20:46:b2:11:af:e5:8e:9c:45:
         69:f6:aa:88:c3:06:63:f1:60:ca:0c:5d:45:92:34:ee:b3:92:
         40:b4:76:49:23:5a:c7:9b:9a:8c:c5:b4:4a:03:dd:17:4e:41:
         75:85:85:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:34 2025 by rpki-client